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DECLARATION OF HAO-Y TRAN FROEMLING 

I, Hao-y Tran Froemling, declare as follows pursuant to the provisions of 29 U.S.C. § 1746: 

1. lam the Executive Director for Vetting, Office of Intelligence and Analysis, for the 
Transportation Security Administration (TSA),, a component agency of the U.S. 
Department of Homeland Security (DHS). I have held this position since January 2018. 

2. I understand the Plaintiffs in this action have challenged the constitutionality of the 
procedures afforded to U.S. citizens who seek to challenge their pmported placement in 
the Terrorist Screening Database (TSDB). I make this Declaration in support of the 
Defendants’ opposition to Plaintiffs’ Fourth Motion to Compel. The statements herein 
are based on my personal knowledge and infoimation made available to me in my official 
capacity. 

3. As set forth below, I first describe TSA’s mandate and highlight the security measures 
used by TSA to secure aviation. Next, I describe TSA’s risk^based rules. Finally, I 
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describe how TSA*s risk-baaed rules inform mission coverage of the Federal Air Marshal 
Service (FAMS). 

TSA*s Mandate and Security Measures 

4, As a result of the terrorist attacks of September 11,2001, Congress passed the Aviation 
and Transportation Security Act of 2001 (ATSA), which created TSA. ATS A charged 
TSA with responsibility “for security in all modes of transportation” and created a federal 
workforce to screen passengers and cargo at commercial airports. ATSA also granted 
TSA broad authority la “assess threats to transportation,” to “develop policies, strategies, 
and plans for dealing with threats to transportation security,” to “enforce security-related 
regulations and requirements,” and to “oversee the implementation, and ensure the 
adequacy, of security measures at airports.” ATSA also specifically directed TSA to 
take appropriate action with respect to individuals who may be a threat to civil aviation or 
national security. The Intelligence Reform and Terrorism Prevention Act of 2004 
(IRPTA) directed TSA to implement a pre-flight passenger pre-screening program 
comparing passenger information to the No Fly and Selectee Lists and to utilize all 
appropriate records in the Terrorist Screening Database (TSDB). As recommended in the 
final report of the National Commission on Terrorist Attacks Upon the United States 
(9/11 Commission), TSA may also use the “larger set of watch lists maintained by the 
federal government.” 49 C.F.R, § 1560.3. ATSA further directed TSA to deploy 
Federal Air Marshals (FAMs) on every flight determined to “present high security risks.” 

In determining which flights present “high security risks,” ATSA states that “nonstop, 
long distance flights, such as those targeted ou September U, 2001, should be a priority.” 
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Further, TSA may deploy FAMs on passenger nights of air carriers engaged in air 
transportation, including flights by aircraft between two places within the United States, 
and flights between a place in the United States and a place outside the United SfatesJ 
The TSA Administrator is also specifically authorized to exercise oversight and 
responsibility for the functions, duties, and personnel ofthe FAMS. FAMs are 
designated by the Administrator as federal law enforcement officers, and as sudh, carry 
ihe authorities of federal law enforcement officers. From the moment all external doors 
of an aircraft are closed following the hoarding of passengers until the doors are opened 
to allow passengers to leave, the TSA Administrator has die exclusive responsibility to 
direct law enforcement activity related to the safety of passengers on an aircraft involved 
in an incident of air piracy. 

5, TSA executes its mandate in part through the Secure Flight program, which pre-screens 
aviation passengers flying into, out of, within, and over the U.S. against various 
Government watch lists. All aviation passengers must undergo security screening prior 
to entering the sterile area of an airport and boarding an aircraft. Secure Flight may 
designate an individual for enhanced, standard^ or expedited screening at airport security 
checkpoints. 

6. Through Secure Flight, TSA may designate aviation passengers for enhanced screening 
based on a variety of criteria, including random selection, matching to a risk-based, 


^ FAMs are Jijmifed to flights pn U.S.-flagged aircraft and do not operate on foreign air carrier flights into, out of. or 
over the United States, 
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intelligence-driven rule, or otherwise posing a threat to civil aviation or national security 
sufficient to warrant enhanced screening prior to boarding an aircraft. 

7, TSA applies the same checkpoint screening procedures to individuals designated for 
enhanced screening, regardless of whether the individual is designated due to TSDB 
status or is designated randomly or for other reasons. In addition, passengers TSA 
designates for expedited or standard screening are not guaranteed to receive that type of 
screening and may be required to undergo additional screening as a result of 
unpredictable and random screening measures at the checkpoint, to resolve a walk¬ 
through metal detector alarm or an Advanced Imaging Technology (.AIT) alarm, or for 
other reasons. 

8. TSA recommends that all travelers arrive at the airport two to three hours in advance of 
the scheduled flight time. TSA*s intent is to clear passengers for entry to the sterile area 
and to board an aircraft after applying the appropriate security measures. Although 
passengers may be delayed as a result of TSA’s security measures, the purpose is to 
ensure aviation security and the Jfreedom of movement for people and cotnraercc. 


TSA's Risk-Based Ru les 


9. TSA has evolved over time in its approach to aviation security, moving to more risk- 
based, intelligence-driven security operations. Under this passenger-centric approach, 
TSA conducts pre-screening to segment passengers by risk. Risk-based security 
increases operational efficiency and security effectiveness by allowing TSA to focus less 
on lower risk travelers and more on higher risk passengers or those about whom it knows 
less. Quiet Skies is one of TSA's risk-ba.sed security programs that identifies and 
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addresses potential threats from individuals who may intend harm to aviation seciuity but 
who are not in the TSDB maintained by the Terrorist Screening Center (TSC). 

J 0. On December 25, 2009, Umar Farouk Abduhnutallab made a failed attempt to detonate 
an explosive device while onboard flight 253 from Amsterdam to Detroit* Mr. 
Abdulxnutallab was not in the TSDB, Following this attack, the President of the United 
States initiated a review of the facts that permitted Abdulrautallab to board that flight. In 
his January 7,2010 memorandum, the President concluded that immediate actions must 
be taken to enhance the security of the American people. TSA conducted its own review 
of the existing threats to aviation security and determined that it needed to mitigate the 
threat to commercial aviation posed by unknown or partially known terrorists based on 
analysis of current intelligence on lerrorist travel and Iradecrafl. In order to do so, TSA 
partnered with U.S. Customs and Border Protection (CBP) to use the Automated 
Targeting System (ATS) to assist in designating individuals for enhanced screening 
during international air travel. 

11. ATS is an enforcement and decision support tool that uses risk-based targeting to identify 
travelers, cargo and conveyances that may need additional scrutiny by CBP at the U.S. 
border. ATS receives advance information about passengers and crew attempting to fly 
to or from the United States. Information from both the Advanced Passenger Information 
System (APIS), which includes biographical information such as full name, date of birth, 
gender, flight number, date of arrival and departure, citizenship, and passport/alien 
registration card number, among others, and the Passenger Name Record (PNR), which 
refers to res^atioix infonnadon contained in an air carrier’s electronic reservation 
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system and/or departure control system that sets forth the identity and travel plans of each 
traveler or group of travelers included under the same reservation record, are utilized in 
the vetting of individuals attempting to travel to the United States. 

12. ATS compares traveler information to travel patterns requiring additional scrutiny, The 
patterns are baaed on CBP officer experience, analysis of trends of suspicious activity and 
raw intelligence corroborating those trends. For example, ATS can compare information 
on travelers against criteria in a targeting rule developed by CBP that indicates a 
particular travel pattern is used by drug smugglers. CBP officials can then refer a person 
who meets such criteria who is attempting to enter or depart the United States for 
additional scrutiny, often known as a secondary inspection. 

13. TSA creates tw'o sets of rules that leverage ATS to designate passengers for enhanced 

screening. TSA’s rules rely on an analysis of current intelligence reporting to identify a 
small portion of the traveling population into higher risk categories to determine whether 
individuals should receive enhanced screening. The rules developed by TSA exclusively 
address threats to aviation security or to the homeland. < 

. TSA exclusively determines the rules that are used to 
designate airline passengers for enhanced screening and neither the Terrorist Screening 
Center nor the Watchlisting Advisory Council are involved in determining the rules. The 
rules constitute TSA final orders exclusively reviewable in a U.S. Court of Appeals 
pursuant to 49 U.S,C § 46110. 

U.mmil^ules designates passengers on international flights for enhanced screening. 

H^mUm^m^mUlUitemational rules to 

WAMN^NGt This record eonlalM Scmttlve Sccuri^ loAirniaHoii ihil ti cosinlled under49 CfR psiis 15jjuUf}e;~rVd part oTllkb 
ncord nay be disdosed to penoos ^iitaouta '^sced to know*', u defined Is49 CF& pBiUdf-andTSIO, except with Ibc wrIUen 
penniJitlofl ofChc Admloiitntor of IbeTnasportstinn SKiiriQr A^Bisireiton nrllKScerctary ofTraa^rttUop. Onoutborized 
release may reauil In civil pmalQi' or other aciton. ageDdeStpubUe dtsdosare is governed by 5 UJSjC. SS2 and 

. - " ' ' ^ 49CFnpart«l8aad]m 


Case l:16-cv-0Q375-AJT-JF^^J^^i^fj^|^^:^^^j^j^d^:^|^ 8 of 14 PagelD# 8147 

SI NKIIIVF SR’MRifY FNFORMATEON 

screening operations C‘Quiet Skies rules”). TSA identifies such rules to address 
unknown threats to aviation security* These rules arc applied to a limited set of travelers 
who matched to an intemationaJ rule and received enhanced security screening on an 
international flight as a result. Individuals matching to such rules receive enhanced 
screening for a limited period of time. 

15* TSA currently utilizes |||||||||||||^uiet Skies rules. 

Out of the two million passengers TSA screens 
each day, the cunent Quiet Skies rules result in TSA designating approximately!^; 
passengers for enhanced screening. 

16. TSA does not confirm or deny whether an individual received enhanced screening as a 
result of inalching to a rule. Whether or not an individual received enhanced screening as 
a result of matching to a rule, as well as the rules themselves and certain details about 
their implementation, constitute Sensitive Security Information (“SSI”) pursuant to 49 
U.S.C. § 114(r) and 49 C.F.R. §§ 1520.5(b)(9)(i) and (ii). 

17, ISA's risk-based rules are only used by Secure Flight and are not used by any other TSA 
vetting programs. Federal agencies are required to provide “terrorist information” in 
their possession to the National Counterterrorism Center (NCTC) for integTation into a 
terrorism identities database. ‘Terrorist information" is defined as “information about 
individuals known or reasonably suspected to be or to have been engaged in conduct 
constituting, in preparation for, in aid of, or related to terrorism or terrorist activities.” 

This requirement excludes individuals who merely match a Quid Skies rule, as such 
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mdividuals have only triggered a TSA rule that is an indication that there may be etevated 
risk that merits enhanced screening. Simply matching to a rule does not constitute 
derogatory infonnation that fee individual has or is suspected to have been eng^ed in 
conduct constituting, in preparation of, in aid oF, nr related to terrorism or terrorist 
activities. As a result, TSA docs not submit information about iiKlividuals who match to 
a rale to TSC, NC'I C, or ths FBI for further screening or investigation by those agencies 
based solely on the match to the rule.^ 

IS. Individuals who matched to a Quiet Skies rule will conrinue to receive enhanced 
screening ^ period ^ 

order to nuntnuze impacts on travelers, TSA maintains a cleared list to ensure an 
individua] will not continue to receive enhanced screening from matching to a rule 
indefinilely, and to enhance privacy, civil rights and civil liberties protections. After 
^^^^H|orthe requisite time period, individuals will not receive enhanced screening 


as a result of the prior match to a Quiet Skies rule. 
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H^l^mi^qiiired to \indergo enhanced security screening, and will again become 
eligible for this cleared list as described above.^ 

20* TSA rule sets for ATS are developed by the TSA Office of Intelligence & Analysis based 
on current threat information. The Office of Intelligence and Analysts contmuaJly 
evaluates the performance of the rules and the intelligence supporting them, [f a rule is 
determined to no longer be necessary to address a particular threat, the rule will be 
deactivated and individuals identified for enhanced screening using the deactivated rule 
will no longer receive enhanced screening on account of that rule, Further, the ntles are 
reviewed on a quarterly basis by the DHS Office for Civil Rights and Civil Liberties, the 
DHS Privacy Office, and the DHS Office of the General. Counsel. The purpose of this 
review is to ensure that rules are based on current intelligence identifying specific 
potential threats; ace deactivated when no longer necessary to address tltose threats; are 
appropriately tailored to minimize any impact upon bona fide travelers* civil rights, civil 
liberties, and privacy; and are in compliance with relevant legal authorities, regulations, 
and DHS poUcies- 

FAMS Intelliucncc-Based Deployments 

21. FAMs are an integral part of risk-based security where they serve within a matrix of 
security layers, and often as a last line of defense. FAMs serve as a deterrent to those 
with intent to do harm, and ftieir presence helps to sustain the confidence of the traveling 
public. The FAMS is unique in its flexibility and ability to re-deploy thousands of law 


^ Individuals may no longer be re<)uu«d to undergo enhanced screening at on earlier n'me os a result of TSA*s threat 
assessment of the individual, multiple screenings, deactfvatton of the particul.aT Quiet Skies rule, or a sbotter period 

of time for receiving enhanced screening for certain rules. __ 
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enfojtrement officers rapidly in response to specific threats or incidents in the 
transportation domain. As a risk-based organization, FAMS is responsive to current 
mtciligcnce, threats and vulnerabilities and continually reviews its operations to further 
improve and mature the risk-based mission deployment methodology. 

22, Information concerning the deployments, numbers, and operations of FAMs constitutes 
SSI pursuant to 49 U.S.C. § I14(r)and 49C.F.IL §§ l520.5(bXWOrtl®^Mh of aviation 
... security measures, both operational and technical, whether applied directly by the 
Federal government or another person/’ to include information “concerning the 
deployments, numbers, and operations of FAMs constitutes SSI). 

23. In March 2018, the PAMS began coverage of flights with indiwduals who matched to a 

Quiet Skies rule while continuing to prioritize flights ^ vr :) 

explained above, ISA formulates risk-based screening rules 
based on llllllllllllllllll^mmipjj^glfc^^ | to Identify hi^er risk 

travelers who are not on the TSDB. 

24. TSA’s Office of latelligeocc and Analysis (I&A) provides the identities of individuals 
who matched to a Qui^ Sides rule to FAMS up to 72 hours in advance of the individual’s 
scheduled flight. The FAMS analyzes each flight 

25, If a FAM team will cover the flight they will receive information about the passengof in 
advance, including the individual’s name, flight numbei, tiic rule(s) the passenger 
matched, and other available information relevant to the team's coverage. 
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26« All FAM teams have multiple pdorities during a flight, including': /'* • * * 

mBmonjtoring other passengers in the cabin. The FAM team has the same 
priorities on flights with a Quiet Skies passenger (or any other higher-risk passenger) 
onboard, to include v - J monitoring passengers in the cabin, 

although the FAM learn will be sure to observe the iiiglier-risk passenger in case he or 
she exhibits any suspicious activity- Unless suspicious activity is observed, the FAM 
team’s coverage of the Quiet Skies passenger is limited to in-flight observations and 
observations at Bthc airport. FAM 

teams merely observe what any passenger could observe while in the airport or passenger 
cabijL 

27. Alter the flight, the FAM team wUl complete a report on which they will indicate whether 
or not they observed the passenger engage in suspicious activity. If there is no suspicious 
activity observed, the FAMS will make no report of any observations of the individual. 

FAMs may also recommend, based on their observations, that an individual no longer 
receive enhoaced screening as a result of the prior match to a rule. This recommendation 
is then shared with l&A for an assessment as to whether the individual should receive 
enhanced screening for 

28. If the FAMs observe suspicious activity,^ they will describe that activity on the report, 
llie report is then shared with FAMS and i&A personnel, who will independently assess 


* This would aoi permanently remove the possibility of the individual receivinK enhanced scre ening , as 
individual could match i ” V PBrbe 
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designated for enhanced scfconlng, among other reasons 
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the information to determine whether further sharing is warranted, such as with ISA's 
insider threat division.^ If the suspicious activity rises to the level of suspected terrorist 
activity, TSA will share the information with other appropriate government agencies, 
including NCTC and the FBI, Absent such suspicious activity, no information is shared. 

29. By leveraging risk-based rules through Secure Flight, the FAMS is able to use 

intelligence driven information as an element in identifying the highest risk domestic and 
international mission deployments. FAMS provides an adaptive layer of security with 
the ability to change deployment capability - literally overnight - in response to risk 
identified by current intelligence. 


® “fnsidere" are, or present themselves to be, current or former transportation sector workers (including both 1‘SA 
and private sector personnel) and individuals employed or otherwise engaged in providing services requiring 
authorized access to transportation lucilfties, assets, or infrastructure. “Insider Threats'* are “insiders" with the intent 
to cause harm to the transportation domain. 
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DATED: 

August 15,2018 



Arlington, VA 

V-. V v \ 

HAO-Y IRAN FROEMIiiNib 
Executive Director for Vetting 

Office of Intelligence and Analysis 
Transportation Security Administration 
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